I don't want to encourage people who know no better to pick ECB mode
from a list of modes.
But I do want to have access to a naked AES function for uses that
aren't satisfied by any modes.
Why not include a naked AES function, but don't list it among the
optional modes and don't call it "ECB mode"? Call it "bare_AES" and
specify it to raise an exception unless the data input is exactly one
block long.
Regards,
Zooko